Name: ANSI X9.8-1 : 2015
Brand: ABA

FINANCIAL SERVICES - PERSONAL IDENTIFICATION NUMBER (PIN) MANAGEMENT AND SECURITY - PART 1: BASIC PRINCIPLES AND REQUIREMENTS FOR PINS IN CARD-BASED SYSTEMS

Published date

12-01-2013

Publisher

American Bankers Association

Foreword
Introduction
1 Scope
2 Normative references
3 Terms and definitions
4 Basic principles of PIN management
5 PIN handling devices
6 PIN security issues
7 PIN verification
8 Techniques for management/protection of
account-related PIN functions
9 Techniques for management/protection of transaction-related
PIN functions
10 Approval procedure for encipherment algorithms
Annex A (normative) - Destruction of sensitive data
Annex B (informative) - Additional guidelines for the design
of a PIN entry device
Annex C (informative) - Information for customers
Bibliography

Describes the basic principles and techniques which provide the minimum security measures required for effective international PIN management.

Committee	X9
DocumentType	Standard
PublisherName	American Bankers Association
Status	Current

Standards	Relationship
ISO 9564-1:2017	Identical

ANSI X9.24-3 : 2017	RETAIL FINANCIAL SERVICES - SYMMETRIC KEY MANAGEMENT - PART 3: DERIVED UNIQUE KEY PER TRANSACTION
ANSI X9.103 : 2010	FINANCIAL SERVICES - MOTOR VEHICLE RETAIL SALE AND LEASE ELECTRONIC CONTRACTING
ANSI X9.117 : 2012	SECURE REMOTE ACCESS - MUTUAL AUTHENTICATION
ANSI X9 TR 39 : 2009	TG-3 RETAIL FINANCIAL SERVICES COMPLIANCE GUIDELINE - PART 1: PIN SECURITY AND KEY MANAGEMENT
ANSI X9.112-1 : 2009	WIRELESS MANAGEMENT AND SECURITY - PART 1: GENERAL REQUIREMENTS
ANSI X9.58 : 2013	FINANCIAL TRANSACTION MESSAGES - ELECTRONIC BENEFITS TRANSFER (EBT) - SUPPLEMENTAL NUTRITION ASSISTANCE PROGRAM (SNAP) AND CASH BENEFIT PROGRAMS
ANSI X9.24-1 : 2017	RETAIL FINANCIAL SERVICES - SYMMETRIC KEY MANAGEMENT - PART 1: USING SYMMETRIC TECHNIQUES
ANSI X9.112 : 2016	WIRELESS MANAGEMENT AND SECURITY - PART 1: GENERAL REQUIREMENTS
ANSI X9.97-1 : 2009	FINANCIAL SERVICES - SECURE CRYPTOGRAPHIC DEVICES (RETAIL) - PART 1: CONCEPTS, REQUIREMENTS AND EVALUATION METHODS

ISO/IEC 18031:2011	Information technology Security techniques Random bit generation
ISO/IEC 7816-1:2011	Identification cards Integrated circuit cards Part 1: Cards with contacts Physical characteristics
ISO 13491-2:2017	Financial services — Secure cryptographic devices (retail) — Part 2: Security compliance checklists for devices used in financial transactions
ANSI X9.97-1 : 2009	FINANCIAL SERVICES - SECURE CRYPTOGRAPHIC DEVICES (RETAIL) - PART 1: CONCEPTS, REQUIREMENTS AND EVALUATION METHODS
ISO/IEC 7813:2006	Information technology Identification cards Financial transaction cards
ISO 13491-1:2016	Financial services Secure cryptographic devices (retail) Part 1: Concepts, requirements and evaluation methods
EN 1332-3:2008	Identification card systems - Man-machine interface - Part 3: Keypads
ISO 16609:2012	Financial services — Requirements for message authentication using symmetric techniques
ANSI X9.24-1 : 2017	RETAIL FINANCIAL SERVICES - SYMMETRIC KEY MANAGEMENT - PART 1: USING SYMMETRIC TECHNIQUES
ISO/IEC 7816-2:2007	Identification cards — Integrated circuit cards — Part 2: Cards with contacts — Dimensions and location of the contacts
ISO/IEC 7816-4:2013	Identification cards Integrated circuit cards Part 4: Organization, security and commands for interchange
ISO/IEC 7816-3:2006	Identification cards — Integrated circuit cards — Part 3: Cards with contacts — Electrical interface and transmission protocols
ANSI X9.97-2 : 2009(R2017)	BANKING - SECURE CRYPTOGRAPHIC DEVICES (RETAIL) - PART 2: SECURITY COMPLIANCE CHECKLISTS FOR DEVICES USED IN FINANCIAL TRANSACTIONS
ISO/IEC 7812-1:2017	Identification cards — Identification of issuers — Part 1: Numbering system
ISO 9564-2:2014	Financial services — Personal Identification Number (PIN) management and security — Part 2: Approved algorithms for PIN encipherment

View more information

Sorry this product is not available in your region.

Access your standards online with a subscription

Features

Simple online access to standards, technical information and regulations.
Critical updates of standards and customisable alerts and notifications.
Multi-user online standards collection: secure, flexible and cost effective.

Learn more on subscription solutions

Get in touch with us

ANSI X9.8-1 : 2015

FINANCIAL SERVICES - PERSONAL IDENTIFICATION NUMBER (PIN) MANAGEMENT AND SECURITY - PART 1: BASIC PRINCIPLES AND REQUIREMENTS FOR PINS IN CARD-BASED SYSTEMS

Table of Contents

Abstract

General Product Information

International Equivalents

Standards Referenced By This Book

Standards Referencing This Book

Category

Subcategory